SSCP: Systems Security Certified PractitionerDemo

By ISC · Question Mode

QuestionQ631

Systems and Application Security

Which of the following statements is NOT true regarding Application Control?

  • A It limits end users use of applications in such a way that only particular screens are visible.
  • B Only specific records can be requested through the application controls
  • C Particular usage of the application can be recorded for audit purposes
  • D It is non-transparent to the endpoint applications so changes are needed to the applications and databases involved
Explanation

Application Control can constrain accessible screens and requested records and can log application use for audit purposes. It is intended to operate transparently to endpoint applications, without requiring changes to the involved applications or databases; therefore, the assertion that it is non-transparent and requires such changes is incorrect.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!